US Cybersecurity Chief Leaked Sensitive Files to ChatGPT

Politico investigation reveals CISA acting director Madhu Gottumukkala uploaded confidential documents to public AI tool

Jan. 29, 2026 at 12:15am

Got story updates? Submit your updates here. ›

The acting director of the Cybersecurity and Infrastructure Security Agency, Madhu Gottumukkala, uploaded sensitive government documents marked "For Official Use Only" into a public version of ChatGPT last summer, triggering automated security warnings and a Department of Homeland Security damage assessment, according to a Politico investigation.

Why it matters

The incident is notable because public ChatGPT uploads are shared with developer OpenAI, potentially exposing government information to the platform's vast user base. This raises concerns about data security and the appropriate use of AI tools within federal agencies.

The details

Gottumukkala, the interim head of CISA, used a special exception he requested to access the AI tool - which was blocked for other DHS employees - to input the contracting documents. Cybersecurity sensors at CISA flagged the uploads in early August, prompting a DHS-led internal review to assess potential harm. The review's conclusions remain unclear.

  • In early August 2026, cybersecurity sensors at CISA flagged the uploads of sensitive documents to ChatGPT.
  • Gottumukkala has led CISA in an acting capacity since May 2026.

The players

Madhu Gottumukkala

The acting director of the Cybersecurity and Infrastructure Security Agency (CISA).

Department of Homeland Security (DHS)

The federal agency that conducted an internal review to assess the potential harm from Gottumukkala's actions.

OpenAI

The developer of the public version of ChatGPT, which potentially exposed government information to its vast user base.

Got photos? Submit your photos here. ›

What they’re saying

“Gottumukkala "was granted permission to use ChatGPT with DHS controls in place" and that his use was "short-term and limited.”

— Marci McCarthy, Director of Public Affairs, CISA (Politico)

What’s next

The Department of Homeland Security is expected to release the findings of its internal review to assess the potential damage from Gottumukkala's actions.

The takeaway

This incident highlights the need for stricter controls and oversight when federal agencies use public AI tools like ChatGPT, which can potentially expose sensitive government information. It also raises questions about the leadership and decision-making at CISA during Gottumukkala's acting tenure.